Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File:                     FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier:          RiVLVh91gCrjXuVim1moqkP36CGPaTd9a4ysZZwi2tc=
Subject key identifier:   82:1C:E4:F0:EA:4F:F5:33:C7:3E:9E:10:C0:37:81:5F:A9:15:2B:29
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer:       /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial:       0190370639E578CE9FCD49B8B1C88B840CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number:          11CD
Signing time:             Thu 20 Jun 2024 19:01:13 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:13 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:13 +0000
Files and hashes:         1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: 2fQfgGG6R+6rKnn2L699eX5i6nCJOmyqJj+3T9sdAyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:39:e5:78:ce:9f:cd:49:b8:b1:c8:8b:84:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
        Validity
            Not Before: Jun 20 19:01:13 2024 GMT
            Not After : Jun 21 19:01:13 2024 GMT
        Subject: CN=821ce4f0ea4ff533c73e9e10c037815fa9152b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:56:39:44:df:c6:ee:15:34:2f:c9:bf:11:
                    69:4b:04:8c:b4:01:13:3b:c0:d7:7d:8f:31:a6:eb:
                    e2:cf:7c:37:f6:34:73:d4:e2:6a:89:bd:c6:f0:d9:
                    8c:93:0f:7d:76:0e:b2:57:f5:b0:0a:d2:3b:f4:0d:
                    59:0d:01:0d:24:24:c5:7b:1d:2b:df:6b:b4:34:d3:
                    04:f2:6f:c7:2b:9d:09:f4:17:95:a8:20:60:ec:fa:
                    de:f2:1c:01:56:a7:6f:b6:89:9e:a1:51:2c:78:97:
                    75:88:32:26:0e:05:21:81:9b:7d:57:6d:f6:b2:92:
                    27:52:10:c6:0b:87:5f:98:43:6e:f8:0a:95:ad:68:
                    6f:10:6c:ff:3b:42:bd:75:28:0d:4d:84:85:34:c0:
                    f2:9b:a2:69:55:39:87:a0:c4:f5:4b:5c:e4:f3:c6:
                    54:ec:8e:d1:0c:71:fb:0b:9d:55:72:25:0f:88:68:
                    2e:c8:cb:73:68:b1:1d:f3:e2:f7:0c:e0:fa:86:ef:
                    57:11:e5:fe:46:fe:90:42:8e:9a:49:ad:df:16:6e:
                    06:e5:91:78:dd:f5:45:e9:7d:bd:03:75:3d:90:72:
                    c4:3d:23:9b:d2:e4:4b:8b:8a:b9:6d:2c:7f:d2:22:
                    69:7a:27:7e:b0:a6:fc:b2:4f:d7:02:82:b9:b7:45:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1C:E4:F0:EA:4F:F5:33:C7:3E:9E:10:C0:37:81:5F:A9:15:2B:29
            X509v3 Authority Key Identifier:
                keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:74:0c:37:64:bf:84:25:cb:c1:68:fd:e2:63:d7:4e:54:
         de:98:ae:3f:62:e0:b6:b4:10:2b:81:6e:86:7c:5a:90:c8:c3:
         d3:7e:4c:18:32:20:16:63:86:e0:d6:65:cd:e1:dd:2d:48:31:
         35:7f:9a:bc:ae:dc:5b:df:ba:00:91:bb:37:5f:ef:32:fd:ed:
         34:a2:43:cd:ce:92:35:87:fc:e8:3f:cf:01:fd:32:8a:44:3e:
         c0:87:65:c9:0a:3b:86:36:19:0f:8f:14:27:5d:01:4c:8b:9c:
         90:44:61:b4:78:e2:56:a6:45:ca:cc:1f:ce:6e:62:80:74:cf:
         e6:b3:7c:b9:1d:a5:53:be:c4:ab:83:4a:23:9e:d8:2f:15:ef:
         55:db:83:e0:4e:fd:bf:01:f0:3f:24:dd:c7:80:37:05:2c:4b:
         aa:47:6d:74:9c:6b:a7:09:2f:84:c7:c7:b5:d7:5b:42:3e:39:
         75:04:b3:e5:77:17:7f:12:78:98:d6:98:68:03:66:ff:07:73:
         8a:53:cb:ed:9a:f7:0d:f7:01:b9:6d:0b:62:ed:73:97:42:56:
         6d:ae:73:21:c7:30:3f:98:ea:96:68:2b:bf:ee:ee:ee:ff:2f:
         46:75:85:fe:5e:94:73:1f:88:00:77:40:81:69:8c:59:83:2a:
         51:f2:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:42:47 2024 by rpki-client on console-ams.rpki-client.org